{"id":"https://openalex.org/W4388858813","doi":"https://doi.org/10.1145/3576915.3623082","title":"MDTD: A Multi-Domain Trojan Detector for Deep Neural Networks","display_name":"MDTD: A Multi-Domain Trojan Detector for Deep Neural Networks","publication_year":2023,"publication_date":"2023-11-15","ids":{"openalex":"https://openalex.org/W4388858813","doi":"https://doi.org/10.1145/3576915.3623082"},"language":"en","primary_location":{"id":"doi:10.1145/3576915.3623082","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3576915.3623082","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023144708","display_name":"Arezoo Rajabi","orcid":"https://orcid.org/0000-0001-9050-0129"},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arezoo Rajabi","raw_affiliation_strings":["University of Washington, Seattle, WA, USA"],"raw_orcid":"https://orcid.org/0000-0001-9050-0129","affiliations":[{"raw_affiliation_string":"University of Washington, Seattle, WA, USA","institution_ids":["https://openalex.org/I201448701"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002145492","display_name":"Surudhi Asokraj","orcid":"https://orcid.org/0000-0001-8559-241X"},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Surudhi Asokraj","raw_affiliation_strings":["University of Washington, Seattle, WA, USA"],"raw_orcid":"https://orcid.org/0000-0001-8559-241X","affiliations":[{"raw_affiliation_string":"University of Washington, Seattle, WA, USA","institution_ids":["https://openalex.org/I201448701"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007846132","display_name":"Fengqing Jiang","orcid":"https://orcid.org/0009-0002-9077-2399"},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fengqing Jiang","raw_affiliation_strings":["University of Washington, Seattle, WA, USA"],"raw_orcid":"https://orcid.org/0009-0002-9077-2399","affiliations":[{"raw_affiliation_string":"University of Washington, Seattle, WA, USA","institution_ids":["https://openalex.org/I201448701"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018806127","display_name":"Luyao Niu","orcid":"https://orcid.org/0000-0001-8591-5522"},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Luyao Niu","raw_affiliation_strings":["University of Washington, Seattle, WA, USA"],"raw_orcid":"https://orcid.org/0000-0001-8591-5522","affiliations":[{"raw_affiliation_string":"University of Washington, Seattle, WA, USA","institution_ids":["https://openalex.org/I201448701"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052064870","display_name":"Bhaskar Ramasubramanian","orcid":"https://orcid.org/0000-0002-2166-7838"},"institutions":[{"id":"https://openalex.org/I52669646","display_name":"Western Washington University","ror":"https://ror.org/05wn7r715","country_code":"US","type":"education","lineage":["https://openalex.org/I52669646"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bhaskar Ramasubramanian","raw_affiliation_strings":["Western Washington University, Bellingham, WA, USA"],"raw_orcid":"https://orcid.org/0000-0002-2166-7838","affiliations":[{"raw_affiliation_string":"Western Washington University, Bellingham, WA, USA","institution_ids":["https://openalex.org/I52669646"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041520627","display_name":"James A. Ritcey","orcid":"https://orcid.org/0000-0002-6951-5083"},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"James Ritcey","raw_affiliation_strings":["University of Washington, Seattle, WA, USA"],"raw_orcid":"https://orcid.org/0000-0002-6951-5083","affiliations":[{"raw_affiliation_string":"University of Washington, Seattle, WA, USA","institution_ids":["https://openalex.org/I201448701"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079723268","display_name":"Radha Poovendran","orcid":"https://orcid.org/0000-0003-0269-8097"},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Radha Poovendran","raw_affiliation_strings":["University of Washington, Seattle, WA, USA"],"raw_orcid":"https://orcid.org/0000-0003-0269-8097","affiliations":[{"raw_affiliation_string":"University of Washington, Seattle, WA, USA","institution_ids":["https://openalex.org/I201448701"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2232","last_page":"2246"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9365000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9054999947547913,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9861907958984375},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7520188093185425},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7303471565246582},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.696788489818573},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5999017953872681},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.5745117664337158},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.548957109451294},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5157390236854553},{"id":"https://openalex.org/keywords/train","display_name":"Train","score":0.48385822772979736},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.48361459374427795},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.45822983980178833},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.29319101572036743}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9861907958984375},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7520188093185425},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7303471565246582},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.696788489818573},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5999017953872681},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.5745117664337158},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.548957109451294},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5157390236854553},{"id":"https://openalex.org/C190839683","wikidata":"https://www.wikidata.org/wiki/Q2448197","display_name":"Train","level":2,"score":0.48385822772979736},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.48361459374427795},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.45822983980178833},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29319101572036743},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C58640448","wikidata":"https://www.wikidata.org/wiki/Q42515","display_name":"Cartography","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3576915.3623082","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3576915.3623082","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.4099999964237213,"id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G2572970162","display_name":null,"funder_award_id":"CNS-2153136","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6934291839","display_name":null,"funder_award_id":"FA9550-20-1-0074","funder_id":"https://openalex.org/F4320338279","funder_display_name":"Air Force Office of Scientific Research"},{"id":"https://openalex.org/G7191245788","display_name":null,"funder_award_id":"N00014-23-1-2386","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"},{"id":"https://openalex.org/F4320338279","display_name":"Air Force Office of Scientific Research","ror":"https://ror.org/011e9bt93"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W569478347","https://openalex.org/W2008857988","https://openalex.org/W2187089797","https://openalex.org/W2243397390","https://openalex.org/W2533598788","https://openalex.org/W2543927648","https://openalex.org/W2594481151","https://openalex.org/W2745565856","https://openalex.org/W2753783305","https://openalex.org/W2807363941","https://openalex.org/W2888233014","https://openalex.org/W2895763047","https://openalex.org/W2917342912","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2962818281","https://openalex.org/W2963456134","https://openalex.org/W2963857521","https://openalex.org/W2964137095","https://openalex.org/W2964583308","https://openalex.org/W2981207549","https://openalex.org/W2990270730","https://openalex.org/W3015625436","https://openalex.org/W3042368254","https://openalex.org/W3083878034","https://openalex.org/W3087257704","https://openalex.org/W3093137868","https://openalex.org/W3103340107","https://openalex.org/W3152758407","https://openalex.org/W3156793535","https://openalex.org/W3167334189","https://openalex.org/W3213927281","https://openalex.org/W4210572675","https://openalex.org/W4211128380","https://openalex.org/W4214537185","https://openalex.org/W4288057770","https://openalex.org/W4300223101","https://openalex.org/W4382677476","https://openalex.org/W6774549192"],"related_works":["https://openalex.org/W3106646114","https://openalex.org/W4308244459","https://openalex.org/W4221166349","https://openalex.org/W4200628936","https://openalex.org/W4387929148","https://openalex.org/W4389518867","https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547"],"abstract_inverted_index":{"Machine":[0],"learning":[1],"models":[2,110],"that":[3,40,62,114],"use":[4],"deep":[5],"neural":[6],"networks":[7],"(DNNs)":[8],"are":[9,84],"vulnerable":[10],"to":[11,60,104,116],"backdoor":[12,19,82],"attacks.":[13],"An":[14],"adversary":[15],"carrying":[16],"out":[17],"a":[18,22,26,29],"attack":[20],"embeds":[21],"predefined":[23],"perturbation":[24],"called":[25],"trigger":[27,45,68],"into":[28],"small":[30],"subset":[31],"of":[32,43,100,107],"input":[33,48,119],"samples":[34,120],"and":[35,71,87],"trains":[36],"the":[37,41,44,47,67],"DNN":[38],"such":[39],"presence":[42],"in":[46,50],"results":[49],"an":[51],"adversary-desired":[52],"output":[53],"class.":[54],"Such":[55],"adversarial":[56],"retraining":[57],"however":[58],"needs":[59],"ensure":[61],"outputs":[63],"for":[64],"inputs":[65],"without":[66],"remain":[69],"unaffected":[70],"provide":[72],"high":[73],"classification":[74],"accuracy":[75],"on":[76,94],"clean":[77],"samples.":[78],"Existing":[79],"defenses":[80],"against":[81],"attacks":[83],"computationally":[85],"expensive,":[86],"their":[88],"success":[89],"has":[90],"been":[91],"demonstrated":[92],"primarily":[93],"image-based":[95],"inputs.":[96],"The":[97],"increasing":[98],"popularity":[99],"deploying":[101],"pretrained":[102],"DNNs":[103],"reduce":[105],"costs":[106],"re/training":[108],"large":[109],"makes":[111],"defense":[112],"mechanisms":[113],"aim":[115],"detect":[117],"'suspicious'":[118],"preferable.":[121]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}